Delegated Signer (DS)

The Delegated Signer RR is part of the DNSSEC standard. It appears at the point of delegation in the parent zone and contains a digest of the DNSKEY RR used as either a Zone Signing Key (ZSK) or a Key Signing Key (KSK). It is used to authenticate the chain of trust from the parent to the child zone. The DS RR is optionally created using the dnssec-signzone utility supplied with BIND.

One day real soon now™

Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or info-support at zytrax. You will have a warm inner glow for the rest of the day.